[jboss-jira] [JBoss JIRA] Commented: (EJBTHREE-1036) TimeOut method callback should bypass security as it has no security context

TimeOut method callback should bypass security as it has no security context ---------------------------------------------------------------------------- Key: EJBTHREE-1036 URL: http://jira.jboss.com/jira/browse/EJBTHREE-1036 Project: EJB 3.0 Issue Type: Task Reporter: Anil Saldhana Assigned To: Anil Saldhana Spec 18.2.2: "Since the timeout callback method is an internal method of the bean class, it has no client security context. When getCallerPrincipal is called from within the timeout callback method, it returns the container's representation of the unauthenticated identity." Basically the ejbTimeout callback should have zero security checks (bypass auth, authorization, runas). This is in line with ejb2.